The tool’s popularity exploded during the pandemic, as it’s an easy-to-use and powerful utility that can prove helpful in a range of everyday tasks. The number of installations may be much higher, as the ten million is the maximum download figure supported by the platform. Screencastify is a screen recorder, video editor, and media sharing browser extension with over 10,000,000 installs on the Chrome web store.Īlso Read: What every organization should know about the Notification Obligation Screencastify on the Chrome web store Palant decided to publish a write-up on his blog to warn the millions of people who use Screencastify of the underlying risks, as the vendor has not fully fixed the issues after three months. However, the same privacy and security-related risks remain unaddressed, keeping users at potential risk from websites that partner with the Screencastify platform.

The vendor acknowledged the cross-site scripting (XSS) vulnerability and promptly fixed it after security researcher Wladimir Palant reported it responsibly on February 14, 2022.

However, security flaws still exist that could be exploited by unscrupulous insiders. The popular Screencastify Chrome extension has fixed a vulnerability that allowed malicious sites to hijack users’ webcams and steal recorded videos. Screencastify Chrome Extension Flaws Allow Webcam Hijacks

Screencastify chrome extension